$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.mft File: F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.mft (raw, json) Hash identifier: ghVXw9+0kVvJ4zavvz00uMS9l852X62zgbZPVoizKN0= Subject key identifier: 2C:38:D6:D0:A4:45:D4:85:4F:12:01:35:23:AF:4E:7E:D8:B9:D7:A8 Authority key identifier: F2:F6:6C:72:DE:DB:E3:3A:E6:FD:B7:E2:31:A0:76:66:B8:0E:06:90 Certificate issuer: /CN=F2F66C72DEDBE33AE6FDB7E231A07666B80E0690 Certificate serial: 40AB430988743C620E92B843CB33B0735376D43F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.cer Subject info access: rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.mft Manifest number: F0 Signing time: Tue 07 Jul 2026 21:50:40 +0000 Manifest this update: Tue 07 Jul 2026 21:45:40 +0000 Manifest next update: Wed 08 Jul 2026 23:10:40 +0000 Files and hashes: 1: 3137372e38372e3233322e302f32322d3332203d3e203532353933.roa (hash: vLxN+Gdq47/rAYnZ8GaP7148Q1Fdrc7/YKNZc2vArcg=) 2: 323830343a6431303a3a2f33322d313238203d3e203532353933.roa (hash: 9XX+FYcYYNu7j7Pj8i0mw6HSjzFK2s9ewdL8eHjROTM=) 3: 3137302e38332e3230382e302f32322d3332203d3e203532353933.roa (hash: F5IFHktXsZHyowP22uNs5SqGhBHF8GolFb+tNa5NUt0=) 4: F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.crl (hash: i86LBpO6pK6u/VLU8vzk3RKxpFVRmcyL6GwizzgUqoQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.crl rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 08 Jul 2026 23:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ab:43:09:88:74:3c:62:0e:92:b8:43:cb:33:b0:73:53:76:d4:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2F66C72DEDBE33AE6FDB7E231A07666B80E0690 Validity Not Before: Jul 7 21:45:40 2026 GMT Not After : Jul 8 23:10:40 2026 GMT Subject: CN=2C38D6D0A445D4854F12013523AF4E7ED8B9D7A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7b:7f:31:03:e0:b0:da:a4:9f:eb:af:6c:d0: 48:6f:4e:ef:e2:c8:53:4c:ee:46:78:2e:91:6c:f7: 01:60:ae:6e:64:32:a4:25:5e:c8:3d:f8:9e:83:03: 30:f7:9a:f2:e8:a4:1c:31:68:4f:95:8d:f5:b9:86: a1:11:31:c8:1d:2d:c1:fe:b5:43:4c:07:f8:0a:42: 1c:e0:f6:b7:27:9b:11:8c:ce:9d:2d:52:0c:76:11: c1:90:d7:85:0d:3b:75:34:00:47:5b:77:0f:80:17: b6:0a:05:82:ff:81:36:e6:09:47:7b:c7:11:0f:3a: 22:59:19:56:2d:25:30:ca:05:c2:b6:91:2a:6d:5a: 7d:95:10:d3:ee:28:f0:ae:87:9d:70:6d:e8:ef:d7: 22:eb:e4:50:e0:74:28:54:1d:cc:e8:b0:b5:62:0d: 97:23:50:43:45:56:0b:3c:43:60:a8:c6:c9:41:af: d7:41:c3:e2:fd:87:54:2e:ec:99:6c:dd:d8:44:df: a0:d2:1e:fb:b7:14:92:7f:38:3e:dc:74:f7:8b:5a: 44:ee:30:fb:13:41:5e:ca:a2:9c:65:fb:f3:ee:00: c4:cb:db:ac:c4:42:6a:c3:1c:d8:dc:37:b5:95:6d: 47:2a:0f:72:90:73:61:67:92:36:75:4e:34:a9:9b: 44:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:38:D6:D0:A4:45:D4:85:4F:12:01:35:23:AF:4E:7E:D8:B9:D7:A8 X509v3 Authority Key Identifier: keyid:F2:F6:6C:72:DE:DB:E3:3A:E6:FD:B7:E2:31:A0:76:66:B8:0E:06:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e6:85:35:9b:fe:bf:23:17:f0:b5:92:fd:46:c7:93:b7:24: 7a:28:1c:c3:60:f5:2d:db:b9:17:70:e7:25:4f:3a:d3:8b:10: ed:5c:c2:e6:79:71:9d:3a:52:3c:e2:45:94:4e:4b:ec:38:df: 60:83:b4:a5:e9:77:d9:a9:9a:2e:15:fb:83:8d:7c:51:f9:3f: fb:35:fb:35:b0:98:99:ac:a4:58:19:89:1f:bd:d9:87:23:18: 61:7b:f8:07:d1:5a:d0:a4:a2:7a:15:b4:20:8b:c6:cd:10:36: 24:40:d1:34:b9:55:f7:a3:09:ee:a9:84:70:38:55:b1:e1:9e: 55:0b:8e:e2:11:e8:a3:1a:2e:e9:7c:7d:9b:49:b8:f8:66:a0: a6:82:32:8a:59:24:57:92:f2:23:bf:0c:50:95:3b:01:42:1c: e4:a4:01:15:ee:c0:a5:ac:32:b9:f1:3b:b9:16:cd:c0:f0:19: 44:e1:71:ab:c6:3c:6b:87:24:a4:4f:ae:6a:ce:82:d3:45:83: 79:c4:37:2c:19:bd:23:e8:d9:c8:4b:9b:ac:b9:c9:92:6e:0a: 9b:ec:38:11:2f:5d:43:17:f3:f0:b7:c1:41:17:2f:98:61:ae: 32:79:f9:00:69:ad:c4:80:2f:6a:0f:d6:8b:c0:60:9d:56:69: 83:e2:40:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQKtDCYh0PGIOkrhDyzOwc1N21D8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJGNjZDNzJERURCRTMzQUU2RkRCN0UyMzFBMDc2NjZC ODBFMDY5MDAeFw0yNjA3MDcyMTQ1NDBaFw0yNjA3MDgyMzEwNDBaMDMxMTAvBgNV BAMTKDJDMzhENkQwQTQ0NUQ0ODU0RjEyMDEzNTIzQUY0RTdFRDhCOUQ3QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCse38xA+Cw2qSf669s0EhvTu/i yFNM7kZ4LpFs9wFgrm5kMqQlXsg9+J6DAzD3mvLopBwxaE+VjfW5hqERMcgdLcH+ tUNMB/gKQhzg9rcnmxGMzp0tUgx2EcGQ14UNO3U0AEdbdw+AF7YKBYL/gTbmCUd7 xxEPOiJZGVYtJTDKBcK2kSptWn2VENPuKPCuh51wbejv1yLr5FDgdChUHczosLVi DZcjUENFVgs8Q2CoxslBr9dBw+L9h1Qu7Jls3dhE36DSHvu3FJJ/OD7cdPeLWkTu MPsTQV7Kopxl+/PuAMTL26zEQmrDHNjcN7WVbUcqD3KQc2FnkjZ1TjSpm0SdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULDjW0KRF1IVPEgE1I69Ofti516gwHwYDVR0j BBgwFoAU8vZsct7b4zrm/bfiMaB2ZrgOBpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOE1TVlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdN SDcvMC9GMkY2NkM3MkRFREJFMzNBRTZGREI3RTIzMUEwNzY2NkI4MEUwNjkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyRjY2QzcyREVEQkUzM0FF NkZEQjdFMjMxQTA3NjY2QjgwRTA2OTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OE1TVlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdNSDcvMC9G MkY2NkM3MkRFREJFMzNBRTZGREI3RTIzMUEwNzY2NkI4MEUwNjkwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWuaFNZv+vyMX8LWS/UbHk7ckeigcw2D1Ldu5F3DnJU8604sQ7VzC5nlxnTpS POJFlE5L7DjfYIO0pel32amaLhX7g418Ufk/+zX7NbCYmaykWBmJH73ZhyMYYXv4 B9Fa0KSiehW0IIvGzRA2JEDRNLlV96MJ7qmEcDhVseGeVQuO4hHooxou6Xx9m0m4 +GagpoIyilkkV5LyI78MUJU7AUIc5KQBFe7ApawyufE7uRbNwPAZROFxq8Y8a4ck pE+uas6C00WDecQ3LBm9I+jZyEubrLnJkm4Km+w4ES9dQxfz8LfBQRcvmGGuMnn5 AGmtxIAvag/Wi8BgnVZpg+JA1w== -----END CERTIFICATE-----Generated at Wed Jul 8 16:11:31 2026 by rpki-client